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What is claimed is : 

1 1. A method of restalrting a node in a clustered computer system, wherein the 

2 clustered computer system hosts a group including first and second members that 

3 reside respectively on first and second nodes, the method comprising: 

4 (a) in respo ise to a clustering failure on the first node, notifying the 

5 second member of the group the using the first member; and 

6 (b) in response to the notification, initiating a restart of the first node 

7 using the second m jmber. 



1 2. The method of claim 1, wherein the group comprises a cluster control 

2 group that includes a member on each node participating in clustering in the clustered 

3 computer system, and wljerein the first and second members are each members of the 

4 cluster control group. 



1 3. The method of claim 1, wherein notifying the second member comprises 

2 issuing a membership c lange request to the group using the first member. 
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4. The method 
includes indicating in 
membership change 



3f claim 3, wherein issuing the membership change request 
association with the membership change request that the 
is for the purpose of restarting the first node. 



re mest i 



5. The methoc 
request is for the purptf)se 
the membership chan j e 



6. The method 
node request to the grpup 



of claim 4, wherein indicating that the membership change 

of restarting the first node includes setting a reason field in 
request to a restart value. 



of claim 1, wherein initiating the restart includes issuing a start 
using the second member. 



7. The method 
indicating in associati on 
the purpose of restart] ng 



of claim 6, wherein issuing the start node request includes 
with the start node request that the start node request is for 
the first node. 
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1 8. The method of claim 7, further colfnprising: 

2 (a) detecting the clustering failure in the first node; and 

3 (b) determining whether tl)e clustering failure occurred during a restart 

4 of the first node; 

5 wherein notifying the second member of the group using the first member is 

6 performed in response to detecting the clustering failure in the first node and 

7 determining that the clustering failure aid not occur during a restart of the first node. 
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1 9. The method of claim 8, further comprising signaling an error in response to 

2 detecting the clustering failure in thje first node if the clustering failure occurred 

3 during a restart of the first node. 

1 10. The method of claim jfe, wherein determining whether the clustering failure 

2 occurred during a restart of the first node includes determining whether the start node 

3 request indicates that the start njDde request is for the purpose of restarting the first 

4 node. 

1 11. The method of cl^m 10, further comprising: 

2 (a) counting protocols processed by the first node after a restart; and 

3 (b) signaling/an error in response to detecting the clustering failure in 

4 the first node if the olustering failure occurred during a restart of the first node 

5 and the number of protocols processed by the first node after the restart is less 

6 than a predetermined threshold. 



1 12. The method off claim 6, further comprising, in response to the clustering 

2 failure on the first node, llerminating clustering on the first node after notifying the 

3 second member of the grpup the using the first member. 



1 13. The method/of claim 1, further comprising, in response to the notification, 

2 selecting the second mejpnber from a plurality of members in the group to initiate the 

3 restart of the first node. I 
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1 14. The method o:' claim 13, wherein selecting the second member to initiate 

2 the restart of the first node includes determining that the second member is a lowest 

3 named member among th^ plurality of members. 
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1 15. A method of restarting a node amorig a plurality of nodes in a clustered 

2 computer system, wherein the clustered compnter system hosts a cluster control group 

3 including a plurality of cluster control members, each residing respectively on a 

4 different node from the plurality of nodes, me method comprising: 

5 (a) detecting a clustering failure on a first node among the plurality of 

6 nodes; / 

7 (b) in response to detectimg the clustering failure on the first node, 

8 issuing a membership change request from the first node to the cluster control 

9 member on each other node in the plurality of nodes, the membership change 

10 request indicating that the mernpership change request is for the purpose of 

1 1 restarting the first node; j 

12 (c) terminating clustering on the first node after issuing the 

13 membership change request; / 

14 (d) in response to the membership change request, selecting a second 

15 node from the plurality of noaes that is different from the first node; 

16 (d) issuing a start node request using the selected second node, the 

17 start node request indicating that the purpose of the start node request is for 

18 restarting the first node; ana 

19 (e) in response to tlie start node request, initiating clustering on the 

20 first node. / 

1 16. The method of claim 15, further comprising, in response to a second 

2 clustering failure during initiatior of clustering on the first node: 

3 (a) determining from the start node request that initiated clustering on 

4 the first node that the pur )ose of the start node request is for restarting the first 

5 node; and 

6 (b) in response tc determining that the start node request is for 

7 restarting the first node, s ignaling an error instead of initiating a second restart 

8 of the first node. 
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1 17. An apparatus, comprising: 

2 (a) a memory accessible by a node in a clustered computer system; and 

3 (b) a program resident in the memory, the program configured to 

4 initiate a restart of anothe ' node in the clustered computer system in response 

5 to a notification from the other node of a clustering failure on the other node. 

1 18. The apparatus of claim 17, wherein the program comprises a member of a 

2 group hosted by the clustered comjputer system, the group including an additional 

3 member residing on the other noc 



1 19. The apparatus of claim 18, wherein the group comprises a cluster control 

2 group that includes a member onj each node participating in clustering in the clustered 

3 computer system. 



1 20. The apparatus of clafim 

2 the restart by issuing a start nodfe 
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21. The apparatus of 
the start node request is for the 



the restart of the other node resi 
the other node. 



18, wherein the program is configured to initiate 
request to the group. 



cl^m 20, wherein the start node request indicates that 
purpose of restarting the first node. 



22. The apparatus of claim 17, wherein the program is configured to initiate 



)nsive to a membership change request received from 



1 23. The apparatus of claim 19, wherein the program is configured to 

2 determine whether the membership change request indicates that the membership 

3 change request is for the purpose of restarting the first node. 
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24, A clustered computer systemy/comprising: 

(a) first and second nodes coupled to one another over a network; and 

(b) a group including first and second members, the first member 
resident on the first node and me second member resident on the second node, 
wherein the first member is configured to notify the second member in 
response to a clustering faiLure on the first node, and wherein the second 
member is configured to irjitiate a restart of the first node in response to the 
notification. 



1 25. The clustered computer system of claim 24, wherein the first member is 

2 configured to detect the clustenng failure in the first node, determine whether the 

3 clustering failure occurred dumng a restart of the first node, and notify the second 

4 member in response to detecting the clustering failure in the first node and 

5 determining that the clustering failure did not occur during a restart of the first node. 
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26. The clustered c 
further configured to signa 



is configured to initiate the 
wherein the first member is 
occurred during a restart oF 



►mputer system of claim 25, wherein the first member is 
an error in response to detecting the clustering failure in 



the first node if the clusteri ig failure occurred during a restart of the first node. 



27. The clustered c omputer system of claim 25, wherein the second member 



restart by issuing a start node request to the group, and 
configured to determine whether the clustering failure 
the first node by determining whether the start node 
request indicates that the s[tart node request is for the purpose of restarting the first 
node. 



28. The clustered 
configured to signal an error 
node if the clustering failure 
number of protocols proce; 
predetermined threshold 



computer system of claim 27, wherein the first member is 
in response to detecting the clustering failure in the first 
occurred during a restart of the first node and a tracked 
sed by the first node after the restart is less than a 
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29. The clustered 
further configured to te: 
member. 




puter system of claim 24, wherein the first member is 
clustering on the first node after notifying the second 



30. The clustered computer system of claim 24, further comprising a third 
node coupled to the first and second nodes, wherein the group includes a third 
member resident yon the third node, wherein the first member is configured to notify 
the third membetr in response to the clustering failure on the first node, and wherein 
each of the second and third members is configured to locally select a single member 
in the group to initiate the restart of the first node. 

31. The clustered computer system of claim 30, wherein the second member 
is configured to locally select the single member by determining whether the second 
member is/a lowest named member among the members of the group. 

33. The clustered computer system of claim 24, wherein the group comprises 
a cluster jbontrol group that includes a member on each node participating in clustering 
in the clustered computer system, and wherein the first and second members are each 
membens of the cluster control group. 



1 [33. The clustered computer system of claim 24, wherein the first member is 

2 configdred to notify the second member by issuing a membership change request to 

3 the group. 
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34. A program product, comprising: 

(a) a program configured to reside on a node in a clustered computer 
system, the program configured to initiate a restart of another node in the 
clustered computer syscem in response to a notification from the other node of 
a clustering failure on the other node; and 

(b) a signal bearing medium bearing the program. 



35. The program produc t 
includes at least one of a record; ible 



of claim 34, wherein the signal bearing medium 
medium and a transmission medium. 
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36. A program product, comprismg: 

(a) first and second programs respectively configured to reside on first 
and second nodes in a clustered computer system, the first and second 
programs respectively operating as first and second members of a group, the 
first program configured to oonfigured to notify the second program in 
response to a clustering failure on the first node, and the second program 
configured to initiate a restprt of the first node in response to the notification; 
and 

(b) at least one si^al bearing medium bearing the first and second 
programs. 

37. The program prodt/ct of claim 36, wherein the first and second programs 
are borne on separate signal bearing media. 



38. The program pro 
are borne on the same signal 



ict of claim 36, wherein the first and second programs 
)earing medium. 
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